Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
File: j5-COvmTs5lcnl_0wii9-ZRR-4o.mft (raw, json)
Hash identifier: i8t9NH/5Byw/jj9VrGzotwB9mZDLg2fh47m6vocvfAo=
Subject key identifier: 42:53:DA:FD:DC:6C:BE:2C:DC:3A:79:A3:30:7C:D0:C9:DE:52:B5:DE
Authority key identifier: 8F:9F:82:3A:F9:93:B3:99:5C:9E:5F:F4:C2:28:BD:F9:94:51:FB:8A
Certificate issuer: /CN=8f9f823af993b3995c9e5ff4c228bdf99451fb8a
Certificate serial: 0197C26DED7ACD21CE81BAC4B7809C9E08B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
Manifest number: 036B
Signing time: Mon 30 Jun 2025 20:01:13 +0000
Manifest this update: Mon 30 Jun 2025 20:01:13 +0000
Manifest next update: Tue 01 Jul 2025 20:01:13 +0000
Files and hashes: 1: 8KsjpNRaIZUXOi8DwLVHVI28dt8.roa (hash: SXYejuZAdmSHLj52AFM2feQKm4GSepnKMI2O57vhHV0=)
2: j5-COvmTs5lcnl_0wii9-ZRR-4o.crl (hash: Fzll4Qp+0orHeXlFbTnRF/uSoi7bO5kVGnLikEh9YLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 20:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:6d:ed:7a:cd:21:ce:81:ba:c4:b7:80:9c:9e:08:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9f823af993b3995c9e5ff4c228bdf99451fb8a
Validity
Not Before: Jun 30 20:01:13 2025 GMT
Not After : Jul 1 20:01:13 2025 GMT
Subject: CN=4253dafddc6cbe2cdc3a79a3307cd0c9de52b5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f6:34:1f:90:f6:27:5a:25:05:53:15:33:63:
98:aa:76:77:d4:00:86:ae:fa:68:f6:09:8d:9a:f3:
7e:28:67:23:a5:12:88:b2:64:03:10:0d:78:25:03:
ae:90:fc:7c:84:c0:09:8b:ea:2d:4b:15:6f:59:a3:
28:61:2e:c2:e3:82:39:d0:7c:ef:21:a7:c9:26:8f:
3f:b6:2a:cc:68:eb:90:c1:46:7a:94:61:1c:0c:b9:
a1:7a:37:c2:11:e1:c9:01:37:8a:9c:48:e9:0b:0e:
d9:f7:57:cb:64:2a:6c:38:d6:14:eb:9a:8e:f0:74:
68:80:5f:b8:e0:63:56:d7:58:5a:86:88:63:88:91:
d2:20:0b:02:f2:9b:df:62:80:25:7a:9a:33:df:8b:
60:bf:5b:64:f2:06:f5:f8:cf:55:7d:c4:db:c8:ed:
72:a0:63:2e:76:b9:ee:a5:99:0d:73:e2:12:41:be:
e4:69:09:a3:96:40:6c:ec:0c:55:81:6c:2a:16:95:
7b:c7:95:04:d7:a6:3a:51:88:29:61:c6:46:72:28:
5d:12:38:5a:cb:92:b7:9f:cd:a8:b1:bd:eb:b9:eb:
ad:4a:a8:78:ef:40:5b:92:be:84:82:90:a1:ce:6d:
cf:a2:89:9c:1c:6a:8d:ec:8f:cb:20:4d:6f:5f:12:
a5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:53:DA:FD:DC:6C:BE:2C:DC:3A:79:A3:30:7C:D0:C9:DE:52:B5:DE
X509v3 Authority Key Identifier:
keyid:8F:9F:82:3A:F9:93:B3:99:5C:9E:5F:F4:C2:28:BD:F9:94:51:FB:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f0:a0:22:ee:2f:a0:d2:92:79:e2:d6:f5:6e:5f:d6:51:bd:
f9:f2:80:de:72:99:cd:6c:b7:5f:a1:de:f0:62:6a:81:ee:22:
26:41:1b:1a:2c:08:73:d6:61:9b:20:23:05:b4:75:52:0b:a4:
6b:73:b4:ed:e3:ef:62:f6:c5:0c:15:39:bb:85:54:ba:7d:97:
23:df:d2:35:67:ed:e7:00:b4:35:1a:48:14:12:aa:7c:19:0d:
ea:4b:b1:bd:b1:15:03:d9:9a:73:cd:ea:d5:c6:1f:f3:6b:a2:
98:87:d8:ff:b6:e5:80:f4:fd:4a:f8:b1:ff:86:f5:09:00:f1:
bc:97:de:01:4f:fa:8f:2d:77:29:0e:95:bd:d9:00:f1:36:71:
de:74:78:bc:3d:49:92:58:df:99:ce:f3:40:b3:8e:03:4e:e9:
ed:b0:f7:a0:e2:e1:70:4a:5e:22:a0:ac:bc:df:5d:c1:f5:7b:
90:51:42:bc:d9:13:e7:c4:28:f7:dc:b5:d4:1f:73:11:a8:7a:
33:dd:d0:be:d0:f7:96:15:20:ad:ec:c2:a9:cc:e3:51:cb:58:
12:d9:40:21:8b:02:8e:a3:58:12:26:6f:a6:a4:5a:42:6a:6e:
e5:34:3a:52:3d:47:4e:93:3a:52:57:c0:c0:cb:59:1d:cd:e8:
8b:f0:e6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 04:24:18 2025 by rpki-client